Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-30133

Nov. 13, 2024, 5:01 p.m.

CVSS Score

5.3 / 10

Product(s) Impacted

HCL Traveler for Microsoft Outlook (HTMO)

Description

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

Weaknesses

CWE-670
Always-Incorrect Control Flow Implementation

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

CWE ID: 670

Date

Published: Nov. 12, 2024, 5:15 p.m.

Last Modified: Nov. 13, 2024, 5:01 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@hcl.com

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

Base Score
5.3
Exploitability Score
1.8
Impact Score
3.4
Base Severity
MEDIUM
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References